Every SSH Session Can Now Be Recorded Without You Ever Knowing
SSH-cast is a pair of Go binaries that records SSH sessions entirely from the local machine β no server-side component, no consent mechanism, no notification. For sysadmins, it’s an elegant audit solution. For everyone else, it means every SSH session you’ve ever had could have been silently captured without your knowledge. The tool exposes a structural flaw: when surveillance happens entirely on the observer’s side, the observed loses all agency.